Re: [openpgp] reviewing sample v5 certificate: can't validate internal signatures

[Daniel Huigens <[e-mail]>]

Hey dkg,

Since I generated them, I can also validate them, though it doesn't
prove much :P

The values we hash are:

a)
903c95635b81783d573f3271965690019a00000037056220d057160000002d092b06010401da470f01010740b550fd420bde0a2af2da98c8086ac75f401b9607b8cc801e308e4f252954ab51051f160a0000002305026220d0570315080a0416000201021b03021e090d2709030703090107010902070205ff000000000000002b

b)
5222aad2131c7b739aba14d74930a6559a00000037056220d057160000002d092b06010401da470f01010740b550fd420bde0a2af2da98c8086ac75f401b9607b8cc801e308e4f252954ab519a0000003c056220d05712000000320a2b060104019755010501010740ec2ae8314d049db9cfc67f58a440f760469700509df267198045ee13c1325d7f03010807051816080000000905026220d057021b0c05ff0000000000000011

One difference I found is in the serialized (v5) key packet, where
I think you're missing the "four-octet scalar octet count for the
following public key material" that's new for v5 key packets.

However, there are some other differences as well, that I haven't
investigated yet, maybe we're doing something wrong as well. Let me
know if you happen to spot something, otherwise I'll look into it more
tomorrow.

Thanks for checking them, in either case!

Best,
Daniel

P.S. It's a bit weird that we used SHA512 for one and SHA256 for the
other, indeed. It seems there's some missing code for the subkey
binding signature to use the preferred hash algorithm, which I set to
SHA512 when generating that key, so it used the default hash for the
curve, SHA256. We'll have to fix that too.